Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
Threat actors successfully infiltrated the software update infrastructure for cPGuard, a web security product, enabling distribution of malicious code to users. The attack delivered both a backdoor for persistent access and a data theft component, representing a significant supply-chain compromise affecting the product's user base.
Key points
- Update infrastructure compromised for cPGuard
- Backdoor and data-stealing malware distributed
- Supply-chain attack affecting security software users
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
